25225 matches found
CVE-2025-31187
This vulnerability affects macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . The flaw allows an application to modify protected parts of the file system due to an improper access control issue (CWE-284). The issue was addressed by removing the vulnerable code . Remediation is ...
CVE-2025-31187
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system...
CVE-2025-31191
This vulnerability exists in the Core Services framework on macOS, iOS, iPadOS, and tvOS . It stems from insufficient protection of service data within the GrantAccessToMultipleFiles interface, allowing an attacker to bypass App Sandbox protection mechanisms. Exploitation could enable unauthorize...
CVE-2025-24238
A logic issue was identified in Apple products, which could allow an app to gain elevated privileges . This vulnerability has been addressed with improved checks. Affected systems include iOS 18.4 , iPadOS 18.4 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , macOS Ventura 13.7.5 , tvOS 18.4 , and wa...
CVE-2025-30451
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data...
CVE-2025-30467
The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-24218
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. An app may be able to access information about a user's contacts...
CVE-2025-24244
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory...
CVE-2025-24213
A type confusion issue in the WebKit engine (including webkitgtk4 and webkit2gtk ) can lead to memory corruption . The root cause is attributed to improved handling of floats . This vulnerability specifically affects ARM architectures ; systems running on x86_64 or x86 (with SSE2 enabled) are not...
CVE-2025-24233
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to read or write to protected files...
CVE-2025-24232
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access arbitrary files...
CVE-2025-24245
This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords...
CVE-2025-31183
This vulnerability affects multiple Apple platforms, including iOS 18.4 , iPadOS 18.4 , macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , tvOS 18.4 , and watchOS 11.4 . The root cause is a lack of sufficient restriction on data container access , which could allow an application to access sensitive user...
CVE-2025-30454
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. A malicious app may be able to access private information...
CVE-2025-24211
A memory handling vulnerability exists in Apple operating systems, including iOS, iPadOS, macOS, tvOS, and visionOS . Processing a maliciously crafted video file can lead to corrupt process memory or unexpected app termination . The issue has been addressed in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6...
CVE-2025-24180
The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix...
CVE-2025-24231
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system...
CVE-2025-30458
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox...
CVE-2025-24267
A permissions issue in macOS allows an application to potentially gain root privileges . This vulnerability has been addressed by Apple with additional restrictions. The issue is fixed in macOS Sequoia 15.4 , macOS Sonoma 14.7.5 , and macOS Ventura 13.7.5 . Remediation is available through these ...